> Markdown version of [/jobs/ext/2600968-application-security-engineer-container-team-w2-only-no-c2c](https://www.wearedevelopers.com/jobs/ext/2600968-application-security-engineer-container-team-w2-only-no-c2c). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer - Container Team (W2 ONLY NO C2C)

- **Company:** Matlen Silver
- **Location:** Charlotte, NC, United States
- **Contract:** Temporary to permanent
- **Skills:** Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing Security, Python (Programming Language), Open Web Application Security, Windows PowerShell, Scripting, Google Cloud, Software Security, GWAPT, Kubernetes, Devsecops
- **Published:** August 9, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e0ff0b4677933eb3

## About the Role

* "Hands-on experience with container security and deployment of scanning tools (e.g., Wiz, Prisma, Aqua Security).
 * Proficiency in scripting languages (Python, Bash, or PowerShell) for automation and tool integration.
 * Deep understanding of secure software development lifecycle (SDLC) and common vulnerabilities (OWASP Top 10).
 * Ability to troubleshoot complex scanning issues and optimize configurations for accuracy and performance.
 * Strong analytical skills for vulnerability triage and risk prioritization.
 * Excellent communication skills for consulting with development teams and explaining technical findings."

Negotiables

 * "Experience integrating security tools into CI/CD pipelines.
 * Familiarity with cloud-native security (AWS, Azure, GCP) and container orchestration (Kubernetes).
 * Exposure to DevSecOps practices and security automation frameworks.
 * Relevant certifications such as OSWE, GWAPT, or CSSLP."



## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)